PT-2006-1968 · Alt N · Alt-N Mdaemon

Publicado 2006-02-28 · Atualizado 2017-07-20 · CVE-2006-0925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Alt-N MDaemon versions 8.1.1 through 8.1.4 Alt-N MDaemon versions prior to 8.1.4

Description The issue is related to a format string vulnerability in the IMAP4rev1 server, which allows remote attackers to cause a denial of service by creating and listing folders with names containing format string specifiers. This is due to an input validation error that does not properly handle such folder names, potentially causing the application to crash or consume a large amount of system resources.

Recommendations For Alt-N MDaemon versions 8.1.1 through 8.1.4, update to a version later than 8.1.4 to resolve the issue. For Alt-N MDaemon versions prior to 8.1.4, update to a version later than 8.1.4 to resolve the issue. As a temporary workaround, consider restricting the creation of folders with names containing format string specifiers to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-0925

Produtos afetados

Alt-N Mdaemon

Referências · 9

• 🔥 https://exploit-db.com/exploits/27329 · Exploit
• http://nsag.ru/vuln/888.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0925 · Nota
• http://securitylab.ru/vulnerability/263070.php · Nota
• http://securityfocus.com/bid/16854 · Nota
• http://secunia.com/advisories/18921 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0729 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24916 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0925 · Nota de Segurança